<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="408">
<package pkgid="7cea49c98f304da68d97740431fd0e9266f85fe05feaf74ff5cd03d8d155827e" name="babeltrace" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="652b73c8388b3f7f7c80a98f13ec387c7443a20860a7bb042c611ba3f9da95b5" name="babeltrace" arch="src">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="4e24412b20afd2e87a2d9d8ad38e01e8be901331cd47c6382a44e2d972801b3f" name="babeltrace-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="d56ca263dbbb01c1e886fa4da626e32b7c090bcfaa0653496b40260cd30d1e20" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="d9a24c50daf4f6bd6fe8e19c4ced830a2d486b50a50f774b92f778f0189abee3" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="0fe938ec68d033f98da3ffc49e72094c769d6c28d2d1580ac8b896475e4b1eeb" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="45610a2926321a1adbc58295a8670932051d4109702cdf76333c53206749baec" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="d23e7aadd35efb0aec6483b7db8c9202acd1560020b719475efbb5cd5b320ae7" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="fae80a1a86af9448dd4f90e6bc92f927d641072ba2c14324e95d5a7236c0eb3f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="114d6c867d081d7b296d3f4b8c2895809a2538c836604aa7fcec1782212a457e" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="05f8f3ed3e49d0f79cc076b868624724aad638811a1c5711c0be003610971c19" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="9edff702ade6a4e0a2aa5c5adabaf0b7bb49a402060e76d068d576dd871c5535" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="9977d39a35e79035fcd282e0bc37d6812fb32890a52db096c9f3689e71f509ac" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="22b36593a4be8e1d00156f0a3a666dfb7a88e50c76304fc4aa58cfe85a06cccf" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="02ce00cb9a1a47413770a6153ec0185a64cee0a89f969a88ac8be62ee6e2f585" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="0dbe8faf09eaf350767cb726d65a799e544ad84027476f011d719c44b7a426d4" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="5ca82cda07499d075b27a5769b1f0b403841a8ca51aad248d7b32d0f8d019cea" name="bpftool" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="58c59ed167898922163df23d64b1295e5fe200ad241e772b5207f2f413315142" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="e2aafa453233547c0280d2f0fa4ec01f6a8e56d01c4647b596d2efe2c8b18fa4" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="67b8245d447946b6d7359e07610d8c16990c1bf20abe02d7afde412b3906b103" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="17a8aa6b3fdbabb47151da85a10ff2b1135439c3bf90fd148df9e678479af14f" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="c1087a79bba62d04fd65e8f28b9df88230803a044d29441795f3dc229615edc8" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="32227434f1894e6a6514d51f27dcd4ca93aff1f737ebeab99f8400bf073f2923" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="16b0c3d19eb935617b9f600248a2803a4285111370f549d2c88e4f5a74e1ce94" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="8452a700c512a1375154554a8ed3d81cd64556452e9821714a62f2cee3b2ffa3" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="8e58303cc8a9652b66074456b88e4ac751fae000633e6c1e92cd0ea15c071dc0" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="23fab6c2c099fcee9c3ef2a553ee4182d4077ef1d6f6bee97ef1ee743c407df2" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="bcb4ebaef65a04fdc6992542daf2cb00e50159f165d37e462e01c6565bafe854" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="dcc92987876b961952bbf062c20b459fa67e115f84a1be703039eb012b9670f2" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="d805ca45d41212024ed0d6e3b6d4a29935e044d390fae4da91e784e97b8be218" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="e0c2c38419e7b92bdeecc1046a34262d42a49580fafff8c38bcc85a66eec0c8e" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="34ce9a3f6e2934dc6d4bdde3c4bdd497e5f98f4035544835d44c13e2e95b742e" name="dwarves" arch="aarch64">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="798680903062eae51d8ec8b6bb99f0cef1fe12037e8450505987f67b327a8f4b" name="dwarves" arch="src">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="6975dc76b6ffc9112c11b7559b2da1c408726098ce70b5df73d50b90fa9897ea" name="dwarves" arch="aarch64">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="95a81561c5514e829e537157a429d7aab84aa6548431f120b057a38c5c59e892" name="dwarves" arch="src">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="12cfe6cca1442df703c09c69fe75bf35bc20d2fdcae9f0018d408df160c87503" name="dwarves-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="0a88f064214b543d3be9b23df545d85d20bb7ff453959d8ce26e56c80caddecf" name="dwarves-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="b923f095d5355aca4505855b82d2217622ec173284661e497dae291d06f15ba1" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="7e887df0c1415060befe42ec56ddf965a6cd656433aec1aaf5515ed1d7ea3df6" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="f090f6220fed3b59f1657400f25a43afc1a4371583facf9ae0fa200af20af4f3" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="b80dce163dbd83d81bd7fbb310865f2d6037dfefa7c84fe217ef99c36fac6d78" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a1e86a8b06e391047d14be411f7de4675dba2b6f4ca4e721d9be57f58feee532" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="c03c83c63b44f4dcff9a081de5a4bf101729e0237f31def1c5ed5d328815aff4" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="c116b3e7a6c5def07a5e85c555d0a75f26799576cbbfbbf9d321e5bcf2fb4af7" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a568780f211407672366520ad33120a5f7a3ec3eee88dc21152a41b0444b2e64" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="ab4b430c92f5f2b1362862c811484ae71c15cbecb1ca9c3b8557df38547f61d5" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="c72cfdde40f18e644fcd3adfa6c0d2efe87a2b31ced8a193002201ee017476de" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="15cbcc17f9856c2d5217fe23360f06f662987f0d14ed69137fccb1aea67b4597" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="01805ce4aa2dd2de48433fbf51434adf66217648e675a9aec381d9ad4832326b" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="669f5217434a6a60a60d2f408a32216ed830dab5b73d22db1fd929895c1911da" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="f177241a1d978c4b8d6d2bff9d4e3a9cf5d3870dce89f11fd0871d8c76476eb9" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="9a3de5e178537cd71acd5028dc6c909983fe38509aafe38f438365eb09c4f1f3" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="caf142768d001ca71ad087f38d3697575e1fc2cefea0984169a4d922226ab230" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="7dbfb9bb08d6c792651212d452b5886f171c41a2931464a3ba72d821d39766a3" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="bf54a2421cd3c18c87488d83229253c581b6c817f5acea557e980c308ad3330f" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="aa4c57cb3fc154c1c97efce3534273ce12f7f3d3976496dfb4d59b06d217bced" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="ca8538615ee3093b0e8b93b178728086ff607dc42de6fbb0591150405f16241e" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="155f4b0fdf12a16ac11ca979545773bf089df6f8a07c4ab4d0cd9d4fcd687253" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2d2b4d20f8939f9664427338837ae21a6a81e19b3914ef2e13c67ea65412c81b" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="fcf28fd67e7bdfa56d739ee4cce4dbf4069e7765750d8b66b9ab51529a1cabdd" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="5f1f8e8aa2f0d32e2564967c122afeb26c61ca3bc7c45ce21b6ce0d27afd0a64" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="e2a1add5bf9437ac238a6d4066603860b62612cce84e36e09a04c7bd9482924a" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="03c119d02ce6ca62f10cb2addde6839854966425796cc24397432c4609288964" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="ce3bb727cc3a684f6e7d24a21c450ae0c94127ed44659e1173904bf2f1fdaf8c" name="kernel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="6caac02f3867838b983b3001fae457b1d68917f00cd4fabd8bc331d638a368d5" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="6a001d85c585bcdb014d9df4beba149b1aeac27f53a4881b0f858bcf30b5ee6d" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="c18e11915704ef9944b2fb7c4741be3f45e72e300b41f4da31f6dfb6c8ba4699" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="364ec87c980f10ff955698465c4d6d7593778110eafa3a8ee2c1a198547e08d2" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="5835a1b3dc457f23a99a5a764e2b630d47427ec3190389409b1efe67da2f988c" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="681600da5dbb14864b3c5f1dceda0842559d7434f090e14343bb3dae2ac5945d" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="028505fd253eea13ae370a381c1ddf3f1ae2d1fa2d63a612509429fe71a5bdf4" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="ac2e992dc23f1cff809c0525e7415e770030f2be8d0f85257f879d2cafd0bfbb" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="8f62e5ff3d5424ea07bdac50bfa608d725258b1dc0b9666b4c77974de0c520f5" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="5733c13031952a21ed455b3a510b36948c33fb99ddfd4d6cd21ab992ee16bf95" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="b384194611128b61bba543591760b7166904d7b40d83c8009bf7b5f07ad16230" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="ade93cdcb9c5643cbed043c51268cb4b42e0df33e42d6b850be047d5d7365566" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="f43accb3bffe8d8531fccbf1fdc1924c5e5f9441a7e0de2d7b2f0b8eddc6536c" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="5c0a997d2ed1ec35db62c8f216679b832a8917131034e74dcd785f75d304d957" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="1a97cbb33f9539e125a88c4ce92e5cb1429470c1fa8c766f4a4c33f1810018a0" name="kernel-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="a4e159188836f165b1e1e9baea7dd8198c32d58996c9f650b477ddece09a6d72" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="aeb9ee4d79cc70a958c7c9dc1d2c0726766c6bf384435e94814bf3ed29aaa442" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="6e562cf1f93d4df6658d24c0cbd3d460fbe277425d3e628d4c5556ec90185979" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="84eddd16c57556aad80e049d023b6ee1c7ee1f954f246be332849a3bcea7a422" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="11eb18567d2693751bafef1ebcb6792872c42d527baf1105a224b2c61b5b98bc" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="b370ce890d15d432d9f1c2b39c87577b16f2669f24619ef26693f4aa7a98a60d" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="a3392813c14dee28a4d1825056d9aa72c185a801966b67df4e93667f1377b098" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="7508f974abaedd71d3f18814f9e6c938b86ed72ea74c1e6e44e7e9b44854d0e1" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="329a2a9947694e5dd5f6d1d5f2d5a43d0e4ebbf83a09796c7618ebc9a3bda05c" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="184a8b23f2c4206665dd4ebac7383e1b6c180f7d23b9322c2644e15afa9bc79f" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="e407573b643dcf66e0dba531d9c0200c5e077e04b14b6a9d71d33ea8e5615226" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="87535fb2cdb529b7a128bc14f1c09808f4e600445cb1823a9e0845b45b54e47c" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="5104825a001a42f9e4eb88dd20e95ad754bf52b0035c910fef18547e6f1b2fd8" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="398c1c1590abb459bdbc837f55e666e76ede381da93302a83a1c9d774f3131e2" name="kernel-cross-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="6b34c0ec6f382f2ef077ce54d491c82fb5ee06c660505574fdc77ffab9fe2ae5" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="6dfd4b1f168afa83292c5e55cc734355f5503f636cf07630ad3903ac73aabaf3" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="5afdfcfa3ba0c7a347b46c3538a17abdedc6cae3e60db2e124513f787dac25a0" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="6dccee17a96639c094f20eb5b014752d51d7d91bf71315cffa22023eef65298a" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="16eb3a7dd92ad187a8aaa93d9269c50304039cefe181b5770c55eaf31cf76b17" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="947afc0343ce9185d87dff4632651bc1adbb485bdb69f4b0e22996c647a7728f" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="af6cdcdc597e822c41d5811ea6c7c02ad10d1ff0a85d7aa25b4b799ee28ebaac" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="98c2cc36600c9d924b5de4868d39c6e07ab0c079c6c4be26d1ae667818877656" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="0a034cb14d38a372a45484cf50159893ada6f6932e6aabb446d3ba1da26c78f2" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="6099ecaa352936d9e63dc9d05f1d7a57442570ff1af230b6bd849bb5b4124ef2" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2263a653da341158ccb29ee9317ae49f7235f964e65a58a01f13075fa7f17aa1" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="21a8e0d65b28983abb8b0852ee443324dc69499d12c2e6695c9b0181e055b2ba" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="a09e37143fdfe3a238df1594ab981d9e872f47a2930b6630961c97330f6cccfb" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="b715220238f7a5c9003e7b122ff5c6f2a52daa15893d4548acc56a90adf9f2e5" name="kernel-debug" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="71934059c0a6cb4384f7dfbc0d8e6424b2876329830b8a2eb1eb821d42144a13" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9939898ac21023930bb4173e9e17174ae6d7d92525beb61f5ac87fb3adf5c820" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="8d5677f87a6a7cf497e765281f2cf7b1818132e20831f688fa0eedede19a5445" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="97efe0cc2bffae740d484f2c601b1cefaa66b7d38e5010348aef401e015716af" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="04213fc6fc8be688c5055970a49e6986de5695ed0db638a9d3d4a969848ea93f" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="80b28c0bc371a45e77e79fd7df533e9f1ac8326f1b9cb95cd0559d08b6c9622e" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="e1ec4adf3e0a215bc90386cee7d8442a6e88572fa3b79ce8638a676be1a2ca37" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="941be98059bbbb40fd6ba973695285d39f20e804a9e74d89ae505916a6577359" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="ef138e545ff638a7b4ba75e64df3f60d2156e1119fb0c8e9e15bf95676071952" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="0342f0b089a5dec42c60e3f631653796ef9af2ac73463432ac65f4223eef1bcc" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="f38cab274da2fb300c846d6116bf0c0d27e5f94707f02c8af1455a558077a1f4" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="70d11c40f60357301b9ddf1579fc1b30f1c6af454f0ee1387870d2d42a4657b7" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="83f9dea1d3b70002905416cfa981c8a9ded5ccb9f30509e042192947eeb2c024" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="938bfff1f47b6d99c46f599be416f1974a18033b86f25ec8fad1ccef61197458" name="kernel-debug-core" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="e968b055f919613eca471e867136f8289d7012fe8c495654634a8bdc8be89fca" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="dd39a482615d8ed32284147b85a6fd6ce00d946267f8e3bd8d1ed31dbaa64a70" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="7ca104c1185913e026d3246b6514bc83ccf32e960e1170dfa94acf50e0ff6836" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="3a7d4060f34993c66ef1c01143571a0cdd7777ee80dafad2f477d2b10db5dfc0" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="d3abe80f469ddac08a919d461d0d407de5d2d1c18731e9b6aa9a3c4fc7fc14e1" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="43d1592af094e9ce2a457af946591f568a223ab4c0ebfa8195531e9fcfe4eb2d" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="5ba2c3e421e6034b8bc87be30c7f991226fd3d934594abd1a2013fb1a785c9a0" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="bb444529083f1403911b5f15b8c1e4d189b531c59b9718a14e935e85f45b2c8e" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="21e37e960a844dd7bd791a685c387028385cf74fb4c835a5daa93d5ac24e85eb" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2d05bde9268a92039043f3b59d6cad89207fbd0cb202295215de23569d65f689" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="02fd4a1afa2763e1bb42bd742321f813067b2d474732a46f74d329e803f58ead" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="62d2dc8119106b7937b579f45071b02684f7646801238a6c8645768985d281ba" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="db39207dcd6404f4d6c52a0218a935c7bf5e560a11b08aba7e1b304b9b6993b9" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="ff6323903eb47699a601be69d204b74fc7e46d4910938a81fc3d8568d609cbdd" name="kernel-debug-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="d8dfd0ff5a42581384bacdcf65e826bfbfe7cec1359762ead3d0609f69f22fef" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="bd42efaccbaa76be90d1d611e6edccba7946d507b20541101131b227d468619f" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="12d7f76049b07a84eec01645cf8535142c9c18359d11586f65955436c1fc8579" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9ca3a116974658126773f9fd5b695484a62d61236df12bde21f30c6c8c390d58" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="45b5e6e86c73690dcbaf5ff170c39a32cd88df4508c0b600cfea2c8685938634" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="38ecf9167c00479c37d68deefaee33390f6ff0ab41888ac006828b3ac84bd0d5" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="0cd339a5f6c077ef8b27ce37f3178701304350ec68ab51e551e646564357d3fb" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="b6c8cf30dc0c89b705072d1af751d155aea57d0492156ab5c58ee72bbc00f6f2" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="c3c04d232f90a06c8341a8ed940ece5be645a564f7ab5344263d11452639f6c2" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="13a87ec675cf46d8f06b0b69e931f473ebc9858ba2231ab3fe6536159308d93d" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="5b9972a096e71ae879ed5d885a90e1d6ba908a915a0aa804c62e870b96b3c78d" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="90012a8e328a3bb5880c6a2623c1b6938352c9e17358cc691ff77b3a00c3968a" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="a0b6080db1e4000845daff11a20c54554897f2f383759b3969e46fa15498a0fe" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="e08ff627505898bbb4bc20bb1798b8280a309ff16989e6c076010d5f85a874ec" name="kernel-debug-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="65fc89a512f6974504fcd6c952379f2b1ba20b8e643575b8833cfbb99571e69c" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="ee05df07a1165af94f54344dda035d00b811dde3c1b4a2821a98b70a17129b94" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="d540a5a2e8315feb5f0566d6afce414d886c0f6085639827bf2d130962126849" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a8aab18633ddff45758522e34f9381a15d7d8b03a5f99bb8fb7315a27eb42d8e" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="bee13928696a56e4907383c1b0e9419a90b4abf627abb0cef10e51ad881d9384" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="3fe4f0f0793b7e8f6062498ad567076df63d057d85e8bc86cd9438c41e23a875" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="a85f52417ae47fc668f51115d991d5db82b5de98b27f654b5de029c29794572a" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="c489df1e66e6c87abbea116efdce9925d5b2edb1a912695333f45fc65e92ac85" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="f7da271f44335a10020f8981b020918d42ea479fbbf782f6e423ea0e76d863b3" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="ae759690851316e30ad8f10dffc6afe96f89b586c7fd172f75b5900d499222bc" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="e5cbbe8b39a03966b50cf333178c976cc721a828f7ada8f0b4c8251e1c71bce2" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="b73b3f8eb0551664c435aff557ef4e2d79d3846e9546a767ace816d364368872" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="83cb25db056c8183d9c0c2c0cc36bfc88da8aeea0f3c9110e2100d612d69e15c" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="ad5d1c57319d69defd7837b8b042bf6fb816d8851164d5624f84571523c7fb9e" name="kernel-debug-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="bf3defd31c4c350148857fee2ac4792b3ed0ffb476cb6b3162544bb891288efe" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="56898ea038b7709a72e76f36ffc57ac3afd5245e12c87768686a6b078d479b33" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="6f073557a116f3fb3699c166f3504920313474480820434810db7a68e07ca1ee" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="d7d97d822cd5d8aea37b93121bef96b025ac7a733f5da18813202cd47d6206cd" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="e586ce39bcc43379a2886bb7bbb0e979a6349f0812175c7b9effafb837512204" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="27f95e252377a9a74ed409e74114394b1ed34e6d280b2092cdd3d85d5c29e419" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="40631d978f0132c6d72362d1997368a789042e8b709cead525893286cfbdb275" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="963c3be20a5b18f933a8f5af858031a1817540d86cea7dff647803e9a8cb3a36" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="214e34e9241d9f2587400e4c45f06ebc5d8178b58a176d817b4b86a81e3e3ca1" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="da1263737a6861b02a90e8e93de9b6d212fc647f6cce43e91d66db2a9b13b21e" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2c44c11166e23e75854e9b4a46ecc928aca76fe2062a7cc3b57fba790e4a9890" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="e19a0cea1249fea21e708e7a24b6d76b47e7c9d4b78af42b0a89f1fc1f1da551" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="eac56565cb0a0d5a9472b48eec9d883293f61a5b7a68581ebf245f6f761ac9a7" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="eb9c578cd0cc1fd7e28e81e6f2fe6b341d284a616f112306d8e50f4a76f6bfd1" name="kernel-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="f2a66a21f5be35b76e3e742935ee9cf0d145ef25796c57f529e6a99a978ce47e" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="947a2584c1e03711e3e66432f7582400647329e4755e296f0b550d2eca52743c" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="743040cf261b17cc8897b4aaad56f1cc8496ca6e51244a38e1be39db01e43cb3" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a599f180db4d0bc3c2e474c0aecb5cf44a96f6e236b0028c0e0b0618c7561cfa" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="ee3fc3ae831273af47020d8ce03cc343667622fb11a4ff6e5fb59d4fc3ec6396" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="be0c0f50665a0867a362ef7af7b51275d84c78df6772f067ed641d6f72e080d2" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="c0952cdce7fce739d6d1f0bc1be6ac261259f74848de0c913537cef2777a9acb" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="321b45336edaa57790984f66c98ee23a94a216f16250dfbdb0c27fe90e2fb443" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="a1380e9410a10233a9a8f0d19fcab02cbb6e5eb633042c815ad97ef0f8b551b2" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="7ac5557d9f72b70a80c24854b9afa537e05c218174820a8ba63b27d24e28bd08" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="df8b608fe377baedecb1a8fccd48c954bf2fba0ebe709e2d6a75b38d98922d9c" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="d41d819990f4a7fc4a51eea76e34871db51e2738072044081e780fdbe23e09a4" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="868c1bdb24beb20945e68e69c8f114aabb6bc2750c059b423ef02ec8d2e4b3bd" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="00c6e6b91194eb85bbf9e9eab49b3ada29639f669338c4e2adcc025ed5b767bf" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="3d623a99c884cb9d876120a538cc8af59f16a8ec292860692925e6d16060360b" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a13649e070b9b4838579fcf5d8fe79e2e7f26cc0d056f88cb92a4a260b3e2f74" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="7a83069fbed881f3737739fc09d3beadf5ef2b758ffce7eaf105d34114694ba3" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="b2d8686b30bcb7dc1b4702e20552737376fdc6b8ae3473c6e54d6acc07595120" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="ef6e98adc1e9c11ac8bedae3d8b467912537d44038f83f774c53fd594edf0227" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="89d988ffb88544917803bafa1808b567be415d556da9a0853ddc89a42c924634" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="d66f8c1c5c6b6d70381ddb8e001890109876af5e5e4be30bb2c11a7445974826" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="13a19c5112b1fc633e71de51d986997901237ff30abaee4e12c7b03d53d9fc58" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="3bc48779292ed695981ce8648f07c837bbd2c8ce2b1083575c74796c14471fb0" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="8cc37506770dc1d51f81a4b40f73d55abf20b88fe969e1601fe5f1dc71c1a7f5" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2103641bc7d0ab525908a6908dd556afca34f7aa5b1d5ac48c57075eb41a3f3e" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="48224d1ae0f13562a59aea5034010936bc45b5aff1f8a64e845851eec626779b" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="cf39c1141bbdf786d8c741c4274ac9ca884577c039d015004bf921d034d73fe8" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="d9be8625e049c582135e04fc70c0ce2c28bd162a152d6dd06a5bb3a12c4c8b4b" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="98d86b4a84d3af2a8474b7afd290219c2b2c7d978bd536f5fdea28da0eb21a3a" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="0e1641c3407f80874d6f64b3a9ca76527a88148a3663d84e57e4d2d42b3b697e" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a18d1d70181def1916c0ddc51a84b22907170327d721bbe7baa1f468fe45ebec" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="7e9624d8fd068ebb774097461110c7abc7639dee6d0ae11dc032454ab8f76798" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="5078e565ec19840302aa0ee1bcb47747642c6638cd84949743f3dbfbabef11a1" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="f7e0bb2e7f78d6677f28ce65d9d5312de3cc3213381e4411b92a5c78767ba271" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="07a3996e80effb6b0fb5d0f37fbfe3065bae1f6cc706ccb83947973b883c9dc9" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="93f3cd19e5855428d9f9936c9d84e42ab15da4c58011a2afe37f9a1b6c0e6708" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="3b614683889302db6dfa526ba4a4118de97f16b5813530b5891464c29b20edfb" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="61ba5d612643a741423a4f05d701e6bee1cbbb27febc7ea8cb997bf57f121571" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="4dd14b7e32fd10d2a015a0778ca9b937f0da3c9d7add957244322ffec8b91e4a" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="5b8ffef257c22eb87870b6a9338618bd442714856c7f958da0cbd2e91c9df9ed" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="c81c9e6f777f4b120bf0823c58a7689e635f1d9d48a4c99e87fa21ba60e2d0be" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="daadf0dffeb9f6a2d4e09fd1e18376d4aee1062a5e0f143e2b24d8ab5f636ac1" name="kernel-debuginfo-common-aarch64" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="3bffe8132d1095ee030074c35effb4a52d0c75dd1823e1c3b12790dfeeed741b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="37de7ead452953e7378b4e11469c690dcd7d1eced8d590423df665ebf1d10c56" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="d5a102d4ac6c5bc85e2c2f517323e1c96a669483ce4df5a7bc240f7261df77b3" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="86b227a78d9de70a80dfa489a0d5b4fba91223ad1b1e898762a210dfc8b6269a" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="de3bc5b75f6d3b687d34d6bdbf11833b12aa3b078069f4a8654880a73cd3a0dd" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="fbe4d090efc58c497e289c736c86795a7d79e4ab28699eb4a8e2d1ada813eed9" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="c2e9c6d69d81b736512574b9d6ff0ef273dbc85520f2d2a72bdda0c38deca54f" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="582145baf8e3a495ba124bef845c80fd2d2519b3e82f7cadfbc1034058403bfe" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="23b22c669b6fac76fd8b0c9826c37e7bd5d8d339f90e58d23d33a4dedb915d5a" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="df792001a5189b7af734b4a671e9e22a8f3927721b895cb910451abce580721e" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="19901d9ca4057916dff8b8f84b977a935addb11db19d629d46d520095b6fce30" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="02a0b967474bcff51e3757724f86819d51521c070c7903c42d5984b25b0ad577" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="b751b84ec7442977b31e044a37e4f6d82b1eb3daf304e8194b254e5e37f4c044" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="da5f425e0be31ac697d27c14a12593d5247842ca4b0dc01ef7b9785ed8d6c740" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="310faf6f7b5382d222e73fdb61a1ef3396baedab95e5eef7d74f465ab1d72bcc" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9d77633fd6804998df7b5b43b58edb98476cde5f55f9bf8ab7809eaafb27fab6" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="f7438a4763768a46476b71fe3d1ee76f61ba395759f4b0e05312673059357c84" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="5a87586385aa29d4762958567a322778abd392968fec1fcc74529db5658c9b96" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="f0df72b369cc5e737dcfa46aa80508799be59237e86daaab0231df68cebd1732" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="32505dedb286a78c4d03f69247a87ba594a3cc33ad0a0eadc8dd3e0088df85c9" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="6cc17a1cc7ec6ea35db48d9d602577a0d8c94772464896437aa294620d364b71" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="626be0c4776ecb289a2d279b11969b0e04c0a5e455286fba17026bbee34659dc" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="1d4ceec51dfbbad02619d1b4cb7f18e09c06dee121b4636d5e6aec208fffdc1a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="af5530baa46186293205741cc576c2feeb041cc626d9522ddb6666e86f701580" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="4f312b2d253a1063793a30d50ab15561c8fc545f5d7f03ffc7b8747295e5142a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="17ea9e9b1d3704afd9bb1aac4825c0136a66939c96fab2739edbcda78721c90b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="36829a7a2e20c447b5ae3f1cfe7b03396f307d016bfcf46a8690c31d88849270" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="6d05317e6f4bfc37b7322620ed0f994fa0ee576cd347919b57534cec94cdc0c7" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="8bb20e6f0653b288cb6c9fd326da79a586a08ea30bba9f43f79b7085cfc2847d" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="578892f536df230e6bb77f01556d383c34f29dbe206a0b2d261d875f6a7adc52" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="b1834ddef8412cfbb743aa956bbc2b854ff012421b7033cfbf0b2d714aebfcf6" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a0596fd5895e14bd64615932c32fe919236914527d84978b107de9547e9dd46d" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="bad2dc64a20d32314cde054b58540f79e830dcd047b2a339d221e3f43841b0e4" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="df94ab9708274ed43398231850be5dad1489d5d9197feb22f4dcb3cb28493713" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="e1bf191fc3634beb828ad68f70c5e928b8e94f7335ca4ad5461da66aa8847bb5" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="fa9a2c93c08a939a258a19847ddfce0251667981662324a42f2c2a00b2a32ae1" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="7e4514f10c3b49fc293bf1ce5fddb31c71e1df7d9157fddaf896095ae306bb79" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="257b6fc1c6c382c5e5c5c30c44857d3eba25f868c8400795dd46105b62f1324f" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="4fd48ebb4c3080680a39b18bd87ff115d426ba33de0546a18debd6ff4f4e3270" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="58c9372a0c93b37a5007162faa0b42d0f8023b249c8a3f2b0506f8125d16d317" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="fff27e78ebcf30480df22475eb95d5dde53b29dfd8a5a9ccce37fde73d73f6a3" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="4e97cdf88169d863548fda23015134701b1dfc27fd8a8510611a6b668fbb1422" name="kernel-modules" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="a8ce886625791fb8432e16bc22746463e3a7417612f4f14c7d2c142dafc38c9b" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="afca89d2c9d739107cfed99ffdc78b00f00fe60a2aed5ed28e9b34b518380640" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="31e5ae168a10eb23131ce0f91362abecdb1f5222c430c43c49a16ab3004fe423" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="2e19b4fc0357b9e6ad27badafa0953ebee2a891c2e666b972c3fac73909e3070" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="84a61519a268d94c6a911a41d78823e4f30ae353be153f67a1a1060498c6de5a" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="9f2214037793f825c51ca4f6568038844e4ba5de0f9662a92718e5d2897eec6a" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="d4ca90dc16ae923673913591dc8f79dafe9d53eb312c103b0e4b8cd8cb7b23fb" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="eed03d4dbf82ffadb1edda79aabd3950b447ef53778d933f535d1d50a99b4c05" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="607754a00c4c4b2b6542e784adae116175f99de303946bf9d723b5c3ead9b4e4" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="919560de50d6e6658dae08042bfc8f0f3916afbcec6722e86d0a0fd3ed646dff" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="47b2cf7347193761a583759f7789ac08ba390561ccaff722432a8ebbaeecf1b4" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="457dbced70519b5a6d5e137c03034ba51ffdc26fa821b75fa643352fb7e7111c" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="ef88db570ac517608a01d80ca50f1f70f4e543ff7c336f4538c4b01c1692ed63" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="40020d6183941f2dfe575546b3995ce1579b4d2f71092de1061c25904e1fa4e2" name="kernel-modules-extra" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="c03abadc0639d90cf582121207e1c5e58623a11ade45e2e9688290deefb4dde5" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="34e2db00892611af74d1bbd05e18a7a4850de5b5ed4ca23cbbd99e97a3921a76" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="77d8aebb54341464d54da004241f73bd39e2fb8dca4617f6a06d8f62a6a28ea8" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="35246998924a13c20b59886e5103bbca5fc6e6199f61be09b25e87f93493b44f" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="e951af10f0e2f5b369cb51031ab419577ee44f078b51b6034056548958576d8f" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="ae1c2ccaadd4700c5908b492add0b1175a08d128772b36bd46c5d5d2ab3cbb6e" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="32880dcf7a005ce1167bb9d10acf1e90e6ed6d623f8f9560f101025b9730edce" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="4ff97b7a90d62856d24f7d5370d9963ccff6f2aaeada57031fd08ae42bf299e4" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="d0830a8a5e7a985030b347ecce89ae1445140dd87f7c02052326546954b6b4d2" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="ef70ad8293e20bc1322d7c911c1e71c30c1dacc1feaeacfd13cdf74f8d1b1d3c" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="d16f3cde8a0f3123a3646468c369a6b0bffdc1b399188586d1eae5f1a9f7f06c" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="a835f51ee7c49c0a287bfe14c11dd603defc44d9d368d46c40a19b200fb43cbc" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="e2d0fd8c95cb0928834ee5e13e1b5a10fd1798274daa7221d1e3cda90615f1bd" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="ba6342034c5c9a409250db4c55b9b7fca553c8e373adad0b6ee0dadf07c7deff" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="f7a3c73a37cfbab7331e1f145688aed40ac36d1c0913b4a63f63783770eadeba" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="ce15952ed53ecd2ca2286e9d3bd1d04c18ab9691e7a5ea88d8e87f414b560d20" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="56bc6e6a464618182e78de2de6461dd2c6dc371e50be6c0c7e69577100eb7c0a" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="8035f0f5645a1c1da711580f3ccc49d425489bc2574f979a3b849f27de4e3ea4" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="6aa52b9ecc61c78817f19c372c68ef88d17f2fdf1a0eca6e1ed7472dc3c6e316" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="e4d1b2393759f5e2338aa51d933bfcdd8401b0f369cb7f44cf31897560ab6b77" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="46f33e6e11c80d8ee2ffc5500d277d5abd49b227a17faeeb69f63ee34e5b5510" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="1b2a907eadd7c69c48e2d495230277d91c6ee6e260e6ea6f77f37c8434ffbfdd" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="5e3858a90191952d0dfe7cc82c364dac2cbfee6596cb2a659e1a5cdb7a2ca4f8" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="9ed202935b02593b9b5a770ba01942b868a45841880fa678e11238f996e74220" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="da015d294a405db615dab0d128fa9372f847c588f326303171bdc50669c4775f" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="e6a1cc1cb655d9b2e8208c9f3d1e7624c06593addf426232231748b3b5cd7817" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="9d5e5f455e8a82fbaa3d39c87601a0016498a7ae8a80d0e3c3792fa26cf8d4bf" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="7f1e71bee1a1ebc6d8e7aa1a2f87df3b24a64b91952918bb4f6c36737e0e957c" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="7e61222d1a8a6cce9922f2efe1edbfd42a5085f8ca9176afb775dbec2a083f90" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="7ab11858e7de05c63c3db1ed24b1581e749296324ba6b3ce4133e64235ea2cef" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="2142261c94fa8d0f4aab354c46f0072c06842862bb71fef94d92fafb56b6a492" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9f645d6247c4cf54025b5aacd471b58e76659764178e94081dd2f9246be1bf6a" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="2ae0a3c8e7027914ddc58045025ecce692cbcec702c28d64623b1108964b792e" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="4cb516daa455416d788abb8d3ea80617d6932b7ed33c4592353d903aeb32c1b7" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="5ee6ebf8ea54d9b02e3ddd5990454aed7792a84dc9c02170db54ee835d7eec7f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="8373f2abaac7d14a697536784dcfb52be8c6f8ad26b58f6b467c2eadacf7a9c2" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="e505cbb0bf6a853c3db683ebcf1979c180dae050b806496812bf616c41eb53fc" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="97bb17a1eae809ead60bdd617112f30299f82ea4b7bf3926b2bc3162bcdbcafa" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="6b3059df269fe9e160688095752fc7cd400fc24cc4aab373172dbd6d161210ed" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="c3ad948bc498ca140b475fbf75ceda5e3ed7fd114418711d75d276de71fed18f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="9e250506a78b89071c5510e3d0abc12d4c260eb68f0bf6e329abfe8112230c43" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="4193f86f9bf0ebe5cfc2d926d99a78080eac21a769feaf44e1a50e0f991e1ede" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="01f1827625295891391695968f14791b4ebc2d07fce38bf2b979cd0c5bd2087d" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="2b9a9a5345be4cf723e6252d3ad7f098256816b990099c900bb095d85ba24358" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="dfd0d010d359ac0994e6a8981289cfa47583f90ead6688bc20179ce9cca8e697" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="b2f5080dcfdcebdf6a3224eb0f4c5e8ed9b9e5467195d2116a8a6ff7b1f93052" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="eb9ef56d36011bccefd15c78f38904b86835f71eb49e53835624e2b0290bf47a" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="893524c463d13f53057f045e5c396627a5f0996b21f3a570a317042cae7c407e" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="0079c253b9c7de55b471310c668ab668d9b2abe0338d0638c8332baad274a01d" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="87529bd56c741d0e977acb6d67c7a6aad48af008b9fc8b10edde163376e3682d" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="5ae60026d26fde927b30051a127ca8fe241b9b30e053491711291e260493b1f4" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="a62a532e2ae962175e7d1382718758e4f56716a309009d947bd374252f62682f" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="da2f54cd00910805ea40e0a637e07c019cd0ab55e55d8ef79b158094a19baacf" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="587b6d409e03ae3b4514abd5b0388007402242cd9ccd72336eab53681f5fa830" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="ebe5edd20b598b54e0fda4e4cf3f80ca193a6e9cbbe1a1136ba0da0b6cf49338" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="f271889febc3a21fa6e5c54a9373934a6fa74de5604e66ab5d9c703f4e1ca684" name="kernel-tools-libs" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="65e592557bbae9b6fab13acdc78934fa1abec0b227f8bbdd7589f335eeed8427" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="5aa2ab9119d957d140874a4924e91afc664b787b4d1745c77ce5c8bfe2f536d1" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9ee2daf60cab653969993d8c2963c49972ac3c0f13b633a4476074218640e441" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="07c32500db7e7b99b2066ea80123dd4e18f24e35b3946f7e714c51d5a351b144" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="cc151f6faee99538c54f02d63a2784bda8fe1243367b14249a046e95f9a32c1c" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="0d989cbdb28f5ea8ec1ebd7eed5e3958cc1c856ca401e06f7c7731cbe9d45454" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="595ecb94e9dc93c965ff669ed18bae73b53bd46de5fd396559701426f53cb46b" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="a0950a1ac872783fd0dd3923862556967ccd64583a7bd009be5aac380301c102" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="4ef44debe5bdea071af720ffeca215bf52cc217cf73aae25d288708c836c1821" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="22d1ba33bee8159be9de6fa4ecf14301a3320c9ad00a3c33477a21fc8815fec6" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="9c78e2042351d6bb435d6360e2292cc128d2a4bdeea38439cb30726a93dca402" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="7f39a80728e6ddf1bf8ee2953f193b53a07f7ca2481d3ce9ba259b4e192a51cc" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="0eb99164d529e5c666a5ee08e745c777016440ae20c4f1ec7c9437e18e2bffed" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="9186319c05c477498ee7b3e0ec55d071042a6078e657fac75ed07f8ea787216c" name="kernel-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="fb21d5eaf5c417725e38b7bd4e92aec73179942fc11250e6b06548249b4da408" name="libbabeltrace" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="b686d2606e322a23f860f35bf847dce1b0641f2ac9dec61d0efccedcad511e68" name="libbabeltrace-devel" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="30ac2391fe411503a3bcf96b550f15ace49b1b7d0fa0e71f400da7d60e9f9bf5" name="libbpf" arch="aarch64">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="cf4ac1b261fd85ca2ceeba3c0ec41ac707a850d2f78ce0b0cb10ece0aefa677d" name="libbpf" arch="src">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="6f663ec3246de69e82f8d4da91063f94d715062caf2565e0ab7baf882b2a428b" name="libbpf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="7e587dddc9235dd725298adce6c601d1b0d4d1c3c838ff2ce4c63e0ac32c24a3" name="libbpf-devel" arch="aarch64">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="75778ad48333b8237e60ae80d6638768331e61b5cb0119e46b854b8e5404ab1b" name="libbpf-static" arch="aarch64">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="f5e22fd304336f72f00aa83a78ea58a83c9bbfab569a9da62d95957b82b6d3aa" name="libdwarves1" arch="aarch64">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="8c9a307c44112ef4793c3427e09de134f6791361947ba03096ef3c149ec8e1a4" name="libdwarves1" arch="aarch64">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="539074b3eb6266705a0bdc373b2de8e93cc97fd8e3080ce526406b057f010031" name="libdwarves1-devel" arch="aarch64">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="dc34c007abfbf199d36fd15d71b721495a17e5f0b0fc317ca1680391a601e115" name="libdwarves1-devel" arch="aarch64">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="423db1bc92fecfdc8d484284960b0265d3957cf292bbab88c7dd4dc30de2791a" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="13f037fc0087695185e3dbfd1a9ee0d06f9f9573d3dc233150b323d57844ec73" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="b8daed4d07aacfd1a904a254098a4c14809f7860d860f0064c29b017d26a3d8c" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="2f338b64a0e4e154157930a49474f8dcdd9af7cfda5582b7a3fbb3a49610f26e" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="ab82d3a337b6519300ed97c4c074ad83764af93686782cb60cda7dac2501f062" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="877abb222f5c3472304528fde168f8214a86f78f7eb37065bae6aa95b5d70f57" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="7ba7640804223b62c5c8af70d0ea63d747aaed8574f4639c49d479f9f816e49f" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="898b382fe1bc4fb3f9fb6fd4f1c4bf3641b73d5c3d0a3e27b232135bbab5902d" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="1a4d0e5521cf9353fcd89088bde06fdf0c0b2cb3f18a9d538a5e187063e18d87" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2af711b57e02443293528a7ac7df53b3a0eb85a2ab5e724e77b03860a9c72fb5" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="bc84ff9d4e35cf0180b49b50609026946bb967a6a8bdef8ce1a508f3f3918912" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="7ad136d9705e3566874b37fbda09dbc2c535e6f3de0f836dd2f2017cfa736d45" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="c2b4c4910a4290ca7e6f672466934a148881ec83d20344bd23028037140d5742" name="perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="180ad67efa2a3cbf46023edc206ee7d08cc9c1d91ed4f8b09e4313fbe55269f8" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="40ae74cbf941f63bdbf696ef6d84ee1c18b2abae071d3f114ed28e8f480d64fd" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="01f4a48260f82278548940a0c1067d4caa4779604a73883d9e8a5fe7a1492df5" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="1e69e9788f42a260f6dad34aeb59e11068a8cb8e33905ea08939ad96132bfed0" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="769189991f0738b8d44e212d618b57ac11ec3b5194cc2a14e2ffae4e68f6bcd3" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="c85b3c2a4c8ca38f392d986a0eb42f3bb2a225604e929824987218ab40e8abd8" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="29eead3d2f6cb40a6dc9b166cfd0c4599821149ba1a0f576ed2ff07ff38ee1bd" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="5839fafc6c2ffa539a16172f12fed758208190efb9f68658365a0175e1d60f9d" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="acbe5743581c6583d531c7eba329d399915ed5cd20db5f3c2a05a4f74a00fbac" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="4a2012fa3b4dacb5f30bfc3fcfd4d0052bf34753a4d7caba74ce3428726e9e63" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="4b19f563bddbbdb315fcb4ef77ce39a04d20df3e756064f1b1310367d7bb56d9" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="1cc76f9f2868934e218cbd05af85d0c7d42288773791f0983f25972909a51971" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="d50204cae8a7cc4e8f725ef1e5e259523f980477e37caff21cefff9802de035f" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="d73a1904ec6c75a86584274f25c7fc42c3d50a07e73ac1402eb1c207cb67fb4d" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9f78e1d52b8a84827c7785a38c40d833e82cd9d3d49baecfbfb8c90d7fbf7f6a" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="663906049e551c97b35fcfd4d44efb55616749cd1bd2514290997380a17df924" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="94eeb994a4442ca371ee80b8a003406d29f02285d1700207ecf16679ea35763d" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="b117acd630825298d1018d8dbe90fbf3c8b658e4ec40e3b13d5b3652500c6ce4" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="4dc8ea1796978ae753004d1c7575c3b152b57c1cc50a777dbcc6e5b5204159b3" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="c57cdc6b8384304265192e1b3e88d7fecf561589e7014e50ae2f3bcf044ecf64" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="87d4a0882ae4d273f7048c0d0e628a38e4b166d2897e64731bd1b4c6470d7837" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="054d0663ae1c7c1c94ced7894f2cb7c78a4e858c572ca6202e810cde6af1b808" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="0c2fb5a4233b0a74628cbe1be709fa698a577ee1c9edd33749051325cd010da3" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="8e1a8eb420592f456a378bc0d5f5f87be04625aedb462923af8b0ecdad69975b" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="35aabcba8a4131cc777d06101017dfcb0c2089b25558ff4da9835608c8097349" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="67693998b2a4d191775bdd45600d52b0e49af5d6973b1c763932c264caa0a6e6" name="python-perf" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="318818e444423052d633ae9b6be5e6b8dd4089854044cf17360ac55c7f6b9082" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="b5063ac0ca81d5fa7f2608b6abf38acf6fcc56a112951ab34a8aff0313d68249" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="db3747adbd3d813de935105a2431209cc0b30633e7b7cf0b755625506d275464" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="470d371588bdfcf49f4717a0f78ca64180fa9c782f082d1bc01f8799811555d2" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="49b1c0268e20b90222931dc7d39c2f2903801ba06ecf736d1acdce1f9253c10c" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="4fec4c5ef06654fff63ba8ae2b1e009065c3dd1cbdc349e86403193434c8582f" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="6c830930e23baaf00abf2212da12c6e4134238238253f3c8207f7af66cd7bd59" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="00989c23adee5cef4af07e1e2aef57cedc7b026b97fc5c477dda51da7f162f6e" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="622faa5f4276b2a6c3dd411eb50ee5a1168d96b7ad13a68eef8a9b863b6b47e8" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="fd87273f53cc63f78e50c16621732652b823891c30b3227284722948e5cb5fc5" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="36bba5fa696c032043382f34f4b0cb6c4b44839f00417ba333066c565afcdfb3" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="4f6d8c6fb3e25a54bf2f91b5b19cb35cceac53e3741717945e1c2e3fe695243a" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="23a7eeae3826800e909eb8de30fecca560fc1d56b893f94f8af929819a64e3ea" name="python-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
</otherdata>